$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa File: 652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa (raw, json) Hash identifier: DTVTJYH3qSRAGmwMo2vboCYhsgzoWkGGtWRWwMKoipM= Subject key identifier: C5:C1:C2:C9:4D:46:F9:72:98:AE:09:97:01:75:12:D2:2E:B7:2E:C4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EA79BBF73EFAE88BBE765FF00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 2604:2e88:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:bf:73:ef:ae:88:bb:e7:65:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3a7e8494-1945-4131-969a-995b7d21bf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:b7:04:37:97:ab:4c:a5:f5:df:7d:3f:40: 2e:aa:11:ea:e0:a8:8a:1a:03:2d:3f:2c:61:55:2c: 19:45:26:71:db:af:60:00:ae:aa:37:7a:fd:59:59: 22:03:2f:01:30:16:c1:19:02:f2:04:7e:92:c9:51: be:9c:b4:82:ae:14:ca:f4:ce:09:93:23:2a:9f:57: fd:06:9f:48:f4:51:4f:2c:05:e7:49:0f:e7:f4:f1: 62:6e:03:eb:b5:02:ac:2a:db:e2:db:06:3c:c3:b0: 5c:5c:ae:c1:e0:7c:52:5f:1a:79:86:ea:ee:6d:c2: 17:21:78:3e:68:e2:6d:1d:3e:ed:31:13:fc:06:26: d1:78:16:46:41:a8:00:8d:33:d1:98:dc:67:e8:e0: f7:6c:99:91:2c:3c:0d:c9:73:48:e0:db:60:43:fa: dc:4f:ef:14:05:aa:d4:d2:f0:5c:8b:5a:33:08:a7: a5:1c:da:8b:ef:ab:69:02:e9:f8:fe:f0:f4:fd:b9: 5b:82:82:18:cd:22:11:9e:48:a0:3a:01:db:86:8e: 08:0e:0b:9b:58:c8:fa:6c:95:96:6e:e7:df:08:6c: 50:30:16:72:0f:95:66:45:c2:fc:b7:73:22:97:56: b4:3d:2f:32:dc:97:6a:a9:c9:06:40:b6:95:d2:5f: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C1:C2:C9:4D:46:F9:72:98:AE:09:97:01:75:12:D2:2E:B7:2E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a9:ed:bb:2c:10:36:f6:0a:16:2e:00:b6:fe:c1:0c:2a:61: e8:b4:00:4d:94:b0:6d:f6:c0:dd:fa:94:01:a5:c6:65:45:80: 01:6c:1a:5d:34:2e:a7:65:69:0b:3f:25:66:56:57:13:17:65: c0:80:ca:69:42:f2:c8:e2:bd:1c:c5:41:db:13:e6:0c:41:b7: 2c:66:85:e2:37:62:05:74:14:cf:e1:55:fc:ce:44:12:b1:6d: 48:e6:cf:bb:a4:e6:50:00:61:7c:d6:3f:d2:08:2d:7c:72:87: af:2d:ff:3c:6d:14:a8:f5:bd:3e:50:45:ac:7b:6b:b5:64:cc: 3a:bf:6e:13:45:7f:39:cc:bb:bc:47:9c:34:e8:94:7e:3f:70: 94:44:16:0e:0d:c1:1f:af:85:f5:10:20:c1:dd:4b:5f:5d:30: 89:42:25:52:9b:2d:a6:22:60:cc:bf:25:1b:5f:a7:1e:ef:1e: 67:83:ad:b4:2a:3a:0f:72:27:35:87:bc:23:da:a6:46:00:02: 01:6d:87:31:ab:d8:f0:97:7b:44:6c:07:9b:5d:af:a6:db:4a: 80:5d:cf:44:48:1c:61:54:07:fb:c3:2e:cd:7e:e1:ae:3d:0f: 57:c1:ea:6f:1e:02:be:cb:b1:bf:d4:72:84:e5:5e:83:a3:9a: f0:d6:3b:ed -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nm79z766Iu+dl/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2E3ZTg0OTQtMTk0NS00MTMxLTk2OWEtOTk1YjdkMjFiZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZm3BDeXq0yl9d99P0AuqhHq4KiKGgMtPyxh VSwZRSZx269gAK6qN3r9WVkiAy8BMBbBGQLyBH6SyVG+nLSCrhTK9M4JkyMqn1f9 Bp9I9FFPLAXnSQ/n9PFibgPrtQKsKtvi2wY8w7BcXK7B4HxSXxp5hurubcIXIXg+ aOJtHT7tMRP8BibReBZGQagAjTPRmNxn6OD3bJmRLDwNyXNI4NtgQ/rcT+8UBarU 0vBci1ozCKelHNqL76tpAun4/vD0/blbgoIYzSIRnkigOgHbho4IDgubWMj6bJWW buffCGxQMBZyD5VmRcL8t3Mil1a0PS8y3JdqqckGQLaV0l+HxQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMXBwslNRvlymK4JlwF1EtIuty7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjUyZThiYTgtNzZlYi0z YmExLTg5YzItMjBkY2UwMmE2NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFKntuywQNvYKFi4Atv7BDCph6LQATZSwbfbA3fqUAaXGZUWAAWwa XTQup2VpCz8lZlZXExdlwIDKaULyyOK9HMVB2xPmDEG3LGaF4jdiBXQUz+FV/M5E ErFtSObPu6TmUABhfNY/0ggtfHKHry3/PG0UqPW9PlBFrHtrtWTMOr9uE0V/Ocy7 vEecNOiUfj9wlEQWDg3BH6+F9RAgwd1LX10wiUIlUpstpiJgzL8lG1+nHu8eZ4Ot tCo6D3InNYe8I9qmRgACAW2HMavY8Jd7RGwHm12vpttKgF3PREgcYVQH+8MuzX7h rj0PV8Hqbx4Cvsuxv9RyhOVeg6Oa8NY77Q== -----END CERTIFICATE-----Generated at Fri Aug 21 01:45:22 2026 by rpki-client